{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "AwspulseReadOnly",
            "Effect": "Allow",
            "Action": [
                "logs:DescribeLogGroups",
                "cloudwatch:DescribeAlarms",
                "cloudwatch:ListMetrics",
                "cloudtrail:DescribeTrails",
                "cloudtrail:GetTrailStatus",
                "config:DescribeConfigurationRecorders",
                "sns:ListTopics",
                "ec2:DescribeInstances",
                "ec2:DescribeVpcs",
                "ec2:DescribeFlowLogs",
                "ec2:DescribeNatGateways",
                "ec2:DescribeRegions",
                "s3:ListAllMyBuckets",
                "s3:GetBucketLogging",
                "rds:DescribeDBInstances",
                "ecs:ListClusters",
                "ecs:DescribeClusters",
                "eks:ListClusters",
                "eks:DescribeCluster",
                "lambda:ListFunctions",
                "xray:GetGroups",
                "elasticloadbalancing:DescribeLoadBalancers",
                "sts:GetCallerIdentity"
            ],
            "Resource": "*"
        }
    ]
}